OWASP/cve-lite-cli

fix: make Docusaurus website mobile-responsive about 24 hours ago

enhancement good first issue

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat: verify and fix CVE Lite CLI compatibility with NX workspaces 7 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: mock git subprocess calls in create-pr.test.ts 7 days ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: Refresh NestJS case study with measured remediation structure 8 days ago

documentation help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(tests): e2e fixtures fail when new CVEs appear that match clean-project packages 11 days ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ux: soften imperative language in fix commands section header 15 days ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Builder.io lockfile example and verified case study 17 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Mitosis lockfile example and verified case study 17 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Dyad lockfile example and verified case study 17 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add CopilotKit lockfile example and verified case study 17 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Cline lockfile example and verified case study 17 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: lean down src/index.ts after extraction PRs land 18 days ago

enhancement good first issue refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

perf: reduce scan time for large monorepos 18 days ago

enhancement help wanted performance

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Payload CMS lockfile example and verified case study 19 days ago

documentation enhancement good first issue in progress case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: broken ci-integration link in README should point to workflow-integration 21 days ago

bug documentation good first issue hasPR first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add contextual prioritization signals (usage, reachability hints, exposure) 21 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: fix TypeScript code quality violations from May 2026 audit 21 days ago

enhancement good first issue refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: split parsers.test.ts into one test file per package manager 21 days ago

enhancement good first issue parser refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Svelte lockfile example and verified case study 21 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Phaser lockfile example and verified case study 21 days ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Presenton lockfile example and verified case study 23 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Twenty lockfile example and verified case study 23 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add --ca-cert coverage to validate.test.ts 23 days ago

good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ux: sort case studies index table by lockfile type 24 days ago

documentation good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add CamoFox Browser lockfile example and verified case study 27 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add integration tests that scan example fixtures and assert expected output 28 days ago

enhancement help wanted good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: add usage examples to --help output 28 days ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ux: add visual affordance to collapsible sections in HTML report 29 days ago

enhancement good first issue onhold

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add community contributors section to README 29 days ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add n8n lockfile example and verified case study 29 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add OpenAI Agents JS lockfile example and verified case study 29 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add LangChain.js lockfile example and verified case study 29 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Lit lockfile example and verified case study 29 days ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: add Case Studies link to top navbar next to Compare about 1 month ago

documentation good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Mastra lockfile example and verified case study about 1 month ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Vercel AI SDK lockfile example and verified case study about 1 month ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Gatsby lockfile example and verified case study about 1 month ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: add unit tests for src/cli/validate.ts about 1 month ago

enhancement help wanted good first issue hasPR

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: extract pluralize utility to eliminate repeated count ternaries across output modules about 1 month ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract fix command utilities from src/index.ts to src/utils/fix-runner.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract DEFAULT_BATCH_SIZE and DEFAULT_SEARCH_DEPTH to named constants about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: remove any type assertion in tests/cli-integration.test.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: add braces to single-line if statements in src/cli/args.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract package.json reading helpers from src/index.ts to src/utils/package-json.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract CLI flag validation from src/index.ts to src/cli/validate.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: move formatAdvisorySourceLine() and countBySeverity() out of src/index.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract time and duration utilities from src/index.ts to src/utils/time.ts about 1 month ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: incompatible flag errors should explain which option to use, not just state the conflict about 1 month ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: offline advisory DB unavailable error should include the sync command to create it about 1 month ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: suggest --help when an unknown or unexpected CLI argument is passed about 1 month ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat: add in-repo vulnerable example projects for contributor testing about 2 months ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Open Issues Need Help